TY - GEN
T1 - Research on Cross-Domain Attack Defense and Endogenous Security Mechanism in Power Dispatching Systems Based on Microservices
AU - Xu, Xin
AU - Qu, Gang
AU - Yang, Liqun
AU - Dou, Renhui
AU - Shen, Zeliang
AU - Yao, Zhiqiang
N1 - Publisher Copyright:
© 2025 IEEE.
PY - 2025
Y1 - 2025
N2 - As power dispatching systems evolve toward microservice architectures, containerized modules for scheduling, trading, data collection, and auditing enhance flexibility but also expand the attack surface, exposing risks such as link hijacking, container escape, and cross-domain privilege escalation. This paper presents an endogenous security framework that integrates SM2/SM4-based encrypted communication, zero-Trust access control, and runtime anomaly detection. Mutual authentication ensures secure links, while OPA-UEBA enforces fine-grained authorization, and eBPF with IsolationForest enables real-Time threat detection. Experiments demonstrate over 99% link integrity, 97% node trust, 98% access accuracy, and sub-150 ms latency, offering a practical model for resilient power dispatching security.
AB - As power dispatching systems evolve toward microservice architectures, containerized modules for scheduling, trading, data collection, and auditing enhance flexibility but also expand the attack surface, exposing risks such as link hijacking, container escape, and cross-domain privilege escalation. This paper presents an endogenous security framework that integrates SM2/SM4-based encrypted communication, zero-Trust access control, and runtime anomaly detection. Mutual authentication ensures secure links, while OPA-UEBA enforces fine-grained authorization, and eBPF with IsolationForest enables real-Time threat detection. Experiments demonstrate over 99% link integrity, 97% node trust, 98% access accuracy, and sub-150 ms latency, offering a practical model for resilient power dispatching security.
KW - Power dispatching system
KW - cross-domain attack defense
KW - endogenous security mechanism
KW - microservices
KW - zero trust
UR - https://www.scopus.com/pages/publications/105035827612
U2 - 10.1109/CCNIS69465.2025.00012
DO - 10.1109/CCNIS69465.2025.00012
M3 - 会议稿件
AN - SCOPUS:105035827612
T3 - Proceedings - 2nd International Conference on Computer Communication, Networks and Information Science, CCNIS 2025
SP - 29
EP - 36
BT - Proceedings - 2nd International Conference on Computer Communication, Networks and Information Science, CCNIS 2025
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2nd International Conference on Computer Communication, Networks and Information Science, CCNIS 2025
Y2 - 14 November 2025 through 16 November 2025
ER -